After the PHP hack: the simplest defense against breached databases is not having them
AlexTensor · x · 2026-10-23
Commenting on the recent PHP-related hack, Philip Torr argues society needs more resilience to AI agent attacks, and takes aim at corporate data hoarding: services collect birth dates, phone numbers, addresses and card details they don't need, each stored field a future breach liability. Citing the UK data-protection minimization principle, he argues data should be deleted immediately — browser autofill covers the need — and the simplest way to make stolen databases less dangerous is simply not to have them.
Related event: PHP Supply Chain Attack Sparks Reflection on Data Minimization(2 posts)→
More from Safety
- India's UPI payment system has been running on an expired cert since Sep 2025 — kingslyj · 2026-10-23
- Claude-assisted audit finds Home Assistant sensors leaking email and street name in User-Agent — adrianscottcom · 2026-10-23
- Cloudflare CTO: token spend over next 18 months will go to security, not engineering — No Priors · 2026-10-23
- UK government spent just £13,000 on AI models that found 500 security vulnerabilities — S_OhEigeartaigh · 2026-10-23
- US Treasury proposes banning all American investment in Chinese AI companies — rohanpaul_ai · 2026-10-23
- rez0 claims he may have submitted nearly a third of all Google BugSwat bugs — rez0__ · 2026-10-23